General

  • Target

    wind.mips.elf

  • Size

    27KB

  • Sample

    250106-h1hncazlfw

  • MD5

    3fcfb56cbb500c729f8b83ef17263113

  • SHA1

    1c6cd5c3bba0a22435d1b3820272ea40f5090cfd

  • SHA256

    287674c6de3182e54ad83939f5051379ccba8dc7a3fbcd7ab312029f809c8f4d

  • SHA512

    01c06a14a87364ac0fa1a5dea04dd58e598534e51742c4f48d98e3ef8db0ae0048f6b34b6b92724b350dc90b1f4e237a4ebb7de50996d6b0b43766ddecc49987

  • SSDEEP

    768:q5ZSsgv/IkCuLSmFEMWB3l+sXo9JgGlzDpbuR1JQe:4ZSs4IkCuJeUsYXVJud

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      wind.mips.elf

    • Size

      27KB

    • MD5

      3fcfb56cbb500c729f8b83ef17263113

    • SHA1

      1c6cd5c3bba0a22435d1b3820272ea40f5090cfd

    • SHA256

      287674c6de3182e54ad83939f5051379ccba8dc7a3fbcd7ab312029f809c8f4d

    • SHA512

      01c06a14a87364ac0fa1a5dea04dd58e598534e51742c4f48d98e3ef8db0ae0048f6b34b6b92724b350dc90b1f4e237a4ebb7de50996d6b0b43766ddecc49987

    • SSDEEP

      768:q5ZSsgv/IkCuLSmFEMWB3l+sXo9JgGlzDpbuR1JQe:4ZSs4IkCuJeUsYXVJud

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks